If I understand this right, the best you can do is to put your 2nd
public ip on a separate interface to the lan(vlan) interface ...
Hope this helps
-----Original Message-----
From: Kanwar Ranbir Sandhu [mailto:m3freak at rogers dot com]
Sent: Sunday, 23 January 2005 8:03 AM
To: m0n0wall at lists dot m0n0 dot ch
Subject: [m0n0wall] Configuration for VLANs an multiple WAN IPs
Hello,
Well, I'm completely confused. I was hoping someone would give me a
heads up with my last post, but maybe this one will draw a bit more
interest.
First, let me explain what I want to accomplish:
Internet
|
|
DSL Modem
|
|
m0n0wall (2 WAN IPs, more in future)
|
|
(OPT 3) VLAN 1----Layer 2 switch (for VLANs at first)
(192.168.0.x) / \
/ \
(OPT 2) VLAN 2 \
(192.168.0.x) VLAN 3 (OPT 1)
(Public IP 2)
I want to setup VLANs 1 and 2 on the LAN interface of m0n0wall, sharing
Public IP 1. VLAN 3 has to be assigned Public IP 2.
I've downloaded the CD version of m0n0wall and I'm playing with it right
now. It's been easy enough assigning IPs to the WAN and LAN interfaces,
and setting up VLANs 1 and 2. However, I'm confused with VLAN 3.
VLAN 3's parent interface is the LAN interface, but should it be
assigned Public IP 2 on VLAN 3's interface screen (OPT 1), and then use
Proxy ARP for that public IP? Server or 1:1 NAT is out of the question.
Thanks in advance.
Regards,
Ranbir
--
Kanwar Ranbir Sandhu
Linux Consultant
Systems Aligned Inc.
www.systemsaligned.com
---------------------------------------------------------------------
To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch
Dore Achievement Centres (Pty) Ltd - Hotline: 1300 55 77 11
www.dorecentres.com.au
This e-mail message may contain confidential or privileged information
and is intended solely for the individual to whom it is addressed. If you
are not the named addressee you should not disseminate, distribute or
copy this e-mail. If you have received it in error please notify us
immediately by telephoning 1300 55 77 11 and destroy this e-mail and
any attachments. E-mail transmission cannot be guaranteed to be
secure or error-free as information could be intercepted, corrupted, lost,
destroyed, arrive late or incomplete, or contain viruses. The sender
therefore does not accept liability for any errors or omissions in the
contents of this message, which arise as a result of e-mail transmission.
The content of this email is not necessarily that of the Dore Acievement
Centres unless otherwise specified. This email was scanned for possible
viruses and was sent on 24/1/2005 by barry dot mather at dorecentres dot com dot au to m0n0wall at lists dot m0n0 dot ch